基于传入数据单元数量填充的网站指纹防御方法  

An Effective Website Fingerprinting Defense Utilizing Padding Based on the Number of Incoming Cells

作　　者：黄斌[1] 杜彦辉[1] Huang Bin;Du Yanhui(College of Information and Cyber Security,People’s Public Security University of China,Beijing 100076)

机构地区：[1]中国人民公安大学信息网络安全学院,北京100076

出　　处：《信息安全研究》2024年第12期1100-1106,共7页Journal of Information Security Research

基　　金：中国人民公安大学网络空间安全执法技术双一流创新研究专项(2023SYL07)。

摘　　要：Tor匿名网络是一种旨在保护用户通信隐私的匿名通信系统.然而,网站指纹攻击对用户通信隐私实施去匿名化,从而破坏用户的匿名性.为了防范网站指纹攻击,Tor项目组在其网络中设计部署了一种名为CPF(circuit padding framework)的网站指纹防御框架.然而,CPF防御框架的防御技术无法有效防范最优网站指纹攻击算法Tik-Tok.为此,提出了基于传入数据单元数量填充的网站指纹防御算法Break-Pad.在此基础上,在Tor网络中实现了2种填充机防御模型:August和October.填充机August采用了单向填充机制,而填充机October采用了双向填充机制.实验结果显示,相较于填充机RBB,填充机August少使用18%的带宽开销,将Tik-Tok算法的真阳率进一步降低了2.4%(从80.55%降到78.15%),而填充机October少使用11%的带宽开销,将Tik-Tok算法的真阳率进一步降低了11.3%(从80.55%降到69.25%).这些结果表明,Break-Pad算法能有效防御最优攻击算法Tik-Tok,且其防御性能优于CPF防御框架的防御技术.Tor is an anonymity system that protects users’online privacy.However,website fingerprinting(WF)attacks can deanonymize users’privacy and thus destroy their anonymity protected by Tor.In response,the Tor community has deployed a WF defense framework,called Circuit Padding Framework(CPF)in the Tor network.However,the defense techniques of the CPF framework cannot effectively prevent the most advanced website fingerprinting attack algorithm,TikTok.In this paper,we propose a novel WF defense called BreakPad.Based on BreakPad,we implemented two padding machines called August and October.August is a oneway padding machine,and October is a twoway padding machine.Our results show that,compared to the best padding machine RBB,August,with 18%less bandwidth overhead,further reduces TikTok’s TPR by 2.4%,and October,with 11%less bandwidth overhead,further reduces TikTok’s TPR by 11.3%.The results show that BreakPad is effective against TikTok and outperforms CPF.

关 键 词：隐私保护 匿名通信 TOR 网站指纹 防御 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构] TP393[自动化与计算机技术—计算机科学与技术] TN915.08[电子电信—通信与信息系统]